Attackers are increasingly abusing trusted Windows drivers to turn off antivirus (AV) and endpoint detection and response (EDR) tools, using a technique known as Bring Your Own Vulnerable Driver (BYOVD). Once considered niche, BYOVD has rapidly become a standard component of modern ransomware campaigns, enabling threat actors to operate at the highest privilege level in […]
The post Attackers Weaponizing Trusted Windows Drivers to Kill AV and EDR Processes appeared first on Cyber Security News.